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Fig. 16 Reference 
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After the connection has been accepted, send the caller s 
initial message. This message is not encrypted. 
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If authorization is requested and agreed by the server, 
tell client that the server is ready for its security context. 
Otherwise, go to step 6. 
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Call the SSPI InitidizeSecuntyContext function to get 
a context token. 
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4 


Send the client context token to the server. 
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Call the SSPI AcceptSecurityContext function with the buffer 
received from the client. 


524 


6 


THis step depends on the SSP. Set the CONTEXT_TOKEN 
flag if AcceptSecurityContext provided an output buffer. If it 
returned SEC_E_OK. impersonate the client if so requested by 
the server consumer, and set the CONNECTION_ACCEPTED flag. 
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Since vMessagel is sent unencrypted, the client may provide 
a second message to send encrypted. 
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Open attaches the server response to the pMessage2 
parameter as output. The consumer dient should check 
both the return value from Open and the contents of 
pMessaqe2 if used. 
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